Created attachment 610129[details][diff][review]
Part 2: Inline push
The stub calls js::array_push directly now. I think I will change part 1 to do the same to avoid the jsarray* changes/complexity.
I will add array.concat once we have inline object allocation.